Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Advisory: IBM Aspera Faspex — ibm.com/support/pages/node/7247502 Clear all filters
TI-2025-24740 CVE-2025-36171 · GHSA-cc88-pf3q-mxp4

IBM Aspera Faspex denial of service

Priority LOW 22

IBM Aspera Faspex 5.0.0 through 5.0.13.1 could allow a privileged user to cause a denial of service from improperly validated API input due to excessive resource consumption.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.0032 Published 2025-10-09 No fix listed CWE-770
TI-2025-24759 CVE-2025-36225 · GHSA-j9vj-g2jh-wq6v

IBM Aspera Faspex information disclosure

Priority LOW 20

IBM Aspera 5.0.0 through 5.0.13.1 could disclose sensitive user information from the system to an authenticated user due to an observable discrepancy of returned data.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00235 Published 2025-10-09 No fix listed CWE-203
TI-2023-19021 CVE-2023-37401 · GHSA-92r7-2x48-7rm2

IBM Aspera Faspex cross-origin resource sharing

Priority LOW 29

IBM Aspera Faspex 5.0.0 through 5.0.13.1 uses a cross-domain policy file that includes domains that should not be trusted.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00224 Published 2025-10-09 No fix listed CWE-942